Privacy Policy

Introduction

This Privacy Policy explains how Cloudist Development ("we", "us", "our") collects, uses and protects your information when you use Cloud Video Player: Cloudist — the application published on Google Play under the package name com.mree.cloudist.watch and shown on your device as "Cloudist Watch".

The same policy covers the iOS, macOS and web versions of the application and the website at watch.fromcloud.ist. It applies to every version of the app and to every country in which the app is distributed.

Cloudist Watch is a player for video you already own: it connects to your own cloud storage accounts and to the video files on your device. We do not host, sell or stream a video catalogue of our own.

Information We Collect

The app is built to collect as little as possible. Depending on the features you choose to use, the following may be processed:

• Account information — If you sign in, we process the e-mail address and account identifier provided by Firebase Authentication (Google Sign-In or Sign in with Apple). Signing in is optional; the app is fully usable without an account.
• Cloud storage credentials — When you connect Google Drive, OneDrive, Dropbox, Box, Yandex Disk, a WebDAV server or S3-compatible object storage, authorisation is handled by that provider (OAuth 2.0, or credentials you enter yourself). Access tokens, refresh tokens and storage passwords are held only on your own device, encrypted at rest with AES-GCM-256, and are never transmitted to or stored on our servers.
• Video library metadata — File and folder names, titles, durations, playback positions and playlists. This is kept locally on your device. It is uploaded to Google Firebase Firestore only when you start a backup yourself; there is no automatic library sync.
• Thumbnails — Preview images are generated on your device from your own video files and stored locally. They are not uploaded.
• App preferences — Theme, language and playback settings, synchronised to your account when you are signed in.
• Diagnostics and usage data — Firebase Analytics and Firebase Crashlytics collect anonymous usage statistics, crash reports, device model, operating system version and app version so that we can find and fix defects.
• Purchase data — RevenueCat and the app store handle your subscription status. We never receive or store payment card details.
• Advertising identifiers — Google AdMob may process an advertising identifier in order to serve ads. This does not happen if you hold an ad-free subscription.
• Sign-in history — Device type and timestamp of sign-ins, recorded against your account for security purposes.
• On-device video files — With your permission, the app reads video files stored on your device so that it can play them. Their contents are never uploaded.

We do not collect your precise location, contacts, calendar, messages, photos, health data, or the contents of your video files.

How We Use Your Information

• To give you access to, and play, the video files held in your own cloud accounts and on your device.
• To build and display your library, playlists, thumbnails and resume positions.
• To keep your preferences — and, when you ask for it, your library backup — available across your devices.
• To operate subscriptions and to remove advertising for subscribers.
• To diagnose crashes and improve the stability and performance of the app.
• To answer the support requests you send us.

We do not sell your personal data, and we do not use it for any purpose unrelated to running the app.

Sharing and Third-Party Services

We do not sell or rent personal data. Data is shared only with the service providers below, and only as far as the feature you are using requires:

• Google Firebase (Authentication, Firestore, Analytics, Crashlytics) — accounts, optional backup, diagnostics.
• Google AdMob — advertising in the free version.
• Google Drive API, Microsoft Graph API (OneDrive), Dropbox API, Box API, Yandex Disk API, and any WebDAV or S3-compatible endpoint you configure yourself — access to your own files.
• RevenueCat — subscription and in-app purchase management.
• Google Cast — playback to Chromecast devices on your local network.

Each provider processes data under its own privacy policy. We may also disclose data where the law requires it.

Data Storage and Security

• Your video files stay in your own cloud accounts or on your device. We never copy them to our servers.
• Files downloaded for offline playback are stored only on your device.
• Data in transit is protected with HTTPS/TLS. Data held in Firebase is protected by security rules that restrict every record to the account that owns it.
• Cloud storage access tokens, refresh tokens and passwords are encrypted on your device and never leave it.
• Data processed by Google Firebase may be stored on servers outside your country. Google applies appropriate safeguards for such transfers.

Data Retention and Deletion

We keep data only for as long as your account exists. You can delete it at any time:

• In the app — Settings → Delete my account. Your account is removed together with all synced accounts, library entries, playlists and sign-in history.
• By e-mail — write to support@fromcloud.ist from your registered address. Requests are completed within 30 days.
• Local data — uninstalling the app removes everything stored on the device.

Anonymous, aggregated diagnostic data that can no longer be linked to you may be retained for statistical purposes.

Permissions the App Requests

• Internet and network state — to reach your cloud storage accounts.
• Read video media — optional; only so that the app can play video stored on your device.
• Foreground service (media playback) and wake lock — to keep playing and to keep the screen awake during playback.
• Advertising ID — used by Google AdMob to serve ads when you do not hold an ad-free subscription.

You can withdraw any of these permissions at any time in your device settings.

Advertising

The free version of the app shows banner, interstitial and rewarded ads through Google AdMob. Rewarded ads are only ever shown after you have explicitly chosen to watch one.

Google may use an advertising identifier to personalise ads. You can turn off ad personalisation in your device settings, or remove advertising entirely with an ad-free subscription. Google's advertising practices are described at https://policies.google.com/technologies/ads.

Children's Privacy

The app is not directed at children under 13 years of age, or under the higher minimum age that applies in your country. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your Rights

Depending on where you live — for example under the GDPR in the European Economic Area and the United Kingdom, the KVKK in Türkiye, or the CCPA in California — you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing, and to withdraw consent.

To exercise these rights, write to support@fromcloud.ist. In addition, you may at any time:

• disconnect any cloud account from the storage screen in the app;
• revoke the app's access from your cloud provider's own security settings;
• use the app without signing in at all, in which case nothing is synced and all data stays on your device.

You also have the right to lodge a complaint with your local data protection authority.

Changes to This Policy

We may update this policy from time to time. The current version is always published at https://watch.fromcloud.ist/privacy, and the date at the top of this page shows when it last changed. Material changes will also be announced inside the app.

Contact Us

If you have any question about this policy or about how your data is handled:

• Developer: Cloudist Development
• E-mail: support@fromcloud.ist
• Website: https://www.fromcloud.ist